Cisco Unified Computing System Central Remote Code Execution Vulnerability

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

A vulnerability in the web-based management interface of Cisco UCS Central Software could allow an authenticated, remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.

This vulnerability is due to insufficient validation of user-supplied input in an HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected endpoint on an affected device. A successful exploit could allow the attacker to execute arbitrary commands, write arbitrary files to the filesystem, and obtain sensitive information. To exploit this vulnerability, the attacker must have valid user credentials on the affected device.
Cisco has released software updates that address this vulnerability There are no workarounds that address this vulnerability.

Etkilenen sürümler1 yazılım

Kaynaklar3 kaynak

• CVE.org kaydı
• NVD kaydı
• sec.cloudapps.cisco.com/…scoSecurityAdvisory/cisco-sa-cucs-rce-LzHSFRDQ Diğer

Kayıt geçmişi

1. 4 Kas 2026 19:27Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-16725IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith
• 10,0 CVE-2026-122013Comfast CF-WR632AX Multipart webmgnt path traversal
• 6,3 CVE-2026-76806Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle
• 4,9 CVE-2026-121967Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversal
• 8,4 CVE-2026-110935Path traversal in plug-in deployment
• 3,3 CVE-2026-19731Path Traversal in TÜBİTAK BİLGEM's İmzager